X11 Enumeration
> List open windows
> Authentication Method
>> Xauth
>> Xhost

X11 Exploitation
> xwd
xwd -display 192.168.0.1:0 -root -out 192.168.0.1.xpm
> Keystrokes
Received
Transmitted
> Screenshots
> xhost +

Examine Configuration Files
> /etc/Xn.hosts
> /usr/lib/X11/xdm
>> Search through all files for the command "xhost +" or "/usr/bin/X11/xhost +"

> /usr/lib/X11/xdm/xsession
> /usr/lib/X11/xdm/xsession-remote
> /usr/lib/X11/xdm/xsession.0
> /usr/lib/X11/xdm/xdm-config
>> DisplayManager*authorize:on